Episode 244 – Post-Quantum Cryptography: Leading Projects When Technology Shifts

Post-quantum cryptography (PQC) presents an urgent security challenge as quantum computing threatens to render current encryption methods obsolete. Information security professional Chris Basener highlights that quantum computers, which use qubits to perform complex calculations in superposition, will likely break standard RSA 2048 encryption by 2030. Because attackers are already engaging in "Harvest Now, Decrypt Later" tactics—stealing encrypted data today to decrypt once quantum technology matures—organizations must prioritize immediate risk assessment. Rather than treating PQC as a simple software upgrade, leaders should pursue "cryptographic agility," enabling systems to adapt to evolving standards without total infrastructure replacement. Establishing a comprehensive cryptographic inventory and integrating security requirements into third-party vendor contracts are critical first steps for project managers to ensure long-term organizational resilience against these emerging digital threats.